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I lis engaged in preparation of a strategic plan for infor- 

mation system, development. We envisage a central computer system 
in the future Headquarters | ~| linked to sub-systems in ^ 25X1 

eight regional offices by secure data links in a star configuration. 

The primary purpose of the system is to aid in the input, storage 
retrieval and collation of intelligence relevant to security, and 
in security checking of persons who may have access to . classified 

information or who have applied for visas or citizenship. 

2 . Regional office sub-systems will mainly be used for the input 

and editing of intelligence reports and messages, the transmission 
of these to the central system, the retrieval of records from the 

central system, and the receipt of messages from Headquarters and 

other regions. 

3. When the system is operating documents created within the 

| : |vfill be captured on-'line at time of creation. Intelligence 

reports will 3oe partly structured, partly free text. The structured 
part will include- i'jrctjportant names, dates and places, a descriptor 
list and, for Icjhg documents, possibly an abstract. The structured 
part will be stored In a structured data base and managed by DBMS 
software. : !Wi : ^hin this database will be indexes to the full text 
documents - ; Thfe , ittter will be stored in a separate text data base. 
Correspondence (outwards) and telexes will be classified . according 
to document type, subject matter etc. Subject and name indexes to 
correspondence &nd telexes will be stored in the structured data- 
base . 

4. The free text portion of reports, correspondence and telexes 
will be starpd in a, text database which may be accessed via indexes 
in the structured database or via a search of text. 

5. Consideration is being given to a microform database indexed 
on the com^iiter for documents which cannot easily be captured on- 
line such an inwards correspondence and news clippings „ 

6. The main subsystems or modules are therefore: 

a) Name searching and other identification aids; 

b) Database management including partial indexes to 
textual documents and microfiches; / 

c) Text storage and retrieval? 

d) Text entry and editing? 

e) Inter-office electronic mail? 

f) Implementation of need-to-know principle. 

7. Major applications are aid to: 

a) Security checking of individuals; 

b) Collation and assessment of intelligence relating 
to subversion, espionage and politically motivated 
violence; 

c) Movement analysis of Soviet officials. 
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£?£ 1 ) 


It would be helpful if the discussions could cover the 
ng topics , 

What computers do you have? What applications da. you 
use them for? What operating systexn(s) do. you use? 


Do you use any of the following? Which? What has been 
your experience with each? 

i) Text storage and retrieval software? 

11) Special purpose hardware for text search? 
iii) Data base management, software. 


Have you attempted to link or integrate DBMS with a text 
storage and retrieval system? With what result? For 
example, do you manage indexes to text files using a DBMS? 


If you store data or text relevant to security on-line, 
what kinds of query are most commonly made to the system 
to retrieve this information? For the kinds of query you 
most often xnake do you mostly access structured data or 
free text? 


Do you use any system for electronic mail within your 
organisation? Who supplied it? What is your experience 
With it? 


What h& been your experience wiui woia processing on-line 
and text creation and editing by intelligence officers and/ 
or police officers? 


Have yeti integrated or attempted to integrate word processing, 
electronic mail, land on-line document - storage-and-retrieval? 
What is your experience so far? 


Do you provide intellligence officers or police officers with* 
personal computing capability or the facility to create and 
store personal files? What has been your experience with this? 

What frame grouping or name searching packages do you use? 

Have you evaluated others? With what result? 

Do you have a need to retrieve records by Chin ese, Vietnam ese 
or Arabic names? If so, does your name search | | work 

well tor these? 

What data encryption techniques and devices do you use for 

i) Data transmission? 
ii) Data storage? 

What has been your experience with them? Do you plan to 
make any changes? 

What techniques do you use for the management of selective 


access 

; to computer- 

i) 

files ? 

ill 

folios ; 

iii) 

text paragraphs ; 

iv) 

paragraphs; 

V) 

records ? 

vi) 

data items. 
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8. It would be helpful if the discussions could cover the 

following topics, 

a) What computers do you have? What applications do. you 
use them for? What operating system (s) do you use? 


b) 


c) 


d) 


e] 


f) 


J 


hi 


Do you use any of the following? Which? What has been 
your experience with each? 

i) Text storage and retrieval software; 

ii) Special purpose hardware for text search; 

Data base management, software. 


iii) 


j) 


Have you attempted to link or integrate DBMS with a text 
storage and retrieval system? With what result? For 
example, do you manage indexes to text files using a DBMS. 

If you store data or text relevant to security on-line, 
what kinds of query are most commonly made to the syste 
to J re frSe information? For the kinds of query you 

most of ten make do you mostly access structured data or 
f roc text? 

or police officers? 

What is your experience so far. 

Do you provide intelligence of ^ i ^®^ s f °^ i i?ty C to°create and 

been your Experience with this? 

What name grouping o^ame 5 result.- 
Have you evaluated others. 

, retrieve records by Chinese, - 

Do you have a need *° J? does your name search pror 
or Arabic names? If so, aoes r 

well for these? 


k ) What data encryption techniques and device 


i) Data transmission. 

ii) Data storage; 

What has been your experic 
make any changes? 

1) What techniques do you use 1 
access to computer- 

i) files; 

ii) folios; 

iii) text paragraphs; 
iv) paragraphs , 

v) records; 
vi ) data items . 


with them? Po you 

ie management of s 
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If you haye a micrographics data base:- 

x) Is it indexed on your computer? 
ii) How is security of the micrographics data base managed 
considering that a fiche can show up to several hundred 
frames . 


Are your workstations tempest standard or equivalent? 


Do you maintain a complete log of all attempts to access : 

i) The computer databases? 
ii) The microform databases (if any) ; 
iii) The paper data base. 

Do you analyse this log for unusual patterns of attempted 
access? 

What techniques do you employ for testing the security of 
your: 

i) Computer system? 
ii) Micrographics system (if any)? 


What arrangements do you have to provide backup during loss 
Of service? What arrangements do you have for recovery of 
service after a failure? Are these adequate? 

What protection jd° Y^u have against theft or clandestine 
copying of ..portable storage media such as disks, tapes or 
microfiche? In particular, how are these controls applied 
to privileged out-of-hours workers such as engineers and 
pfogr&njnrters? 

What controls do you apply to ensure that documents are not 
modified or purged from files? 


Do you conduct independent vetting of vendor software 
(eg. operating system, DBMS, communications) to look 
trapdoors? ^ 

: 

Is computer memory purged when not m use?-" ,v ? 


for 


What techniques are employed to identify terminal users? 

Who inspects event logs and how frequently? 

Are repeated attempts by unauthorised persons to access data 
brought automatically and immediately to the security officer s 
attention? 


If history logs are in use, how are they protected? 

Is off-site storage of I | /data employed? If so, 25X1 

how is it protected? 

Is your communications network physically isolated from the 
public network? If so, how frequently are they used? 
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Are alternative data paths available in the communications 
network? If so, how frequently are they used? 


CC) 


vo u use 


Gomuter-output-micr^orin (com.), what kind of 


equipment and what has been your experience? 


DD) 


If you have substituted a magnetic media/computer system 
for an earlier paper file system, what did you do with the 
old files? For example, did you convert them to magnetic 
media or do you manage the old paper files in parallel with 
the new computer system files? 


EE) How many persons do you have engaged in: 

i) Computer programming? 

ii) Computer operations? 

iii) Computer maintenance? 

iv) Computer systems administration? 

v) Other areas of information management? 

FF) Do you do your own computer maintenance? 

■m GG) Did the: introduction of a computer reduce or increase the 

number of people engaged in: 

i) information management? 
iij Any other areas of your organisation? 

HH) Dp you Ppnsicder your computer to be justified by: 

i) Cost' savings? 

ii) Jlore timely information? 

iii) Molje accurate information? 

iv) More complete information available? 

v) Setter. or easier collation of information? 

vi) Other reasons? 


m. ID 


JJ) 


Do you Have a: 

i) Data administrator? 

ii) Data base administrator? 

iii) Data security officer? 

To whom do these positions report and where are they in your 
organisation? 


Do you store raw intelligence on computer files (eg. intercept 
reports and agent reports) or only assessed intelligence, 
the latter, do you maintain an index. on the computer to raw 
intelligence reports? 


KK). 


LL) 


MM) 


What kinds of workstation do you use for: 


i) Word processing? . 

iij Micrographics retrieval cind viewing? 
iii) Data base query and viewing? 

iv) Computer- stored text query and viewing? 


Do intelligence assessors 'use workstations for 
Do you find the stations or terminals suitable 


research? 
for browsing? 


Do you use lightpens, jostick 
other non-keyboard facilities 
of work stations? 


controls (for scrolling) or 
for more effective operation 
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Would any of the software you have developed be available 

to us and under what conditions? 


If you do not at present do or use any . of the things 
mentioned above, do you plan to do so m future. 
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